CVE-2019-12835

Name of the Vulnerable Software and Affected Versions Leanify version 0.4.3

Description The issue allows for a controlled out-of-bounds write in the xml memory writer::write function via characters that require escaping.

Recommendations For Leanify version 0.4.3, consider restricting the input to the xml memory writer::write function to prevent exploitation until a patch is available.